
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
File: vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json)
Hash identifier: 3IxIa+aBG/2me86mj+HhQmZWlDG3BjeDC8vly1U7uco=
Subject key identifier: 11:E7:DC:49:05:A9:C0:FB:91:01:55:A2:1F:78:54:30:4E:32:3A:DD
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 01A0CB591D092ACF4BC37751953B3A8D0946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
Manifest number: 15E5
Signing time: Tue 22 Sep 2026 23:00:09 +0000
Manifest this update: Tue 22 Sep 2026 23:00:09 +0000
Manifest next update: Wed 23 Sep 2026 23:00:09 +0000
Files and hashes: 1: 8JHe7AaBIPNauRvBmwgzSlc2Olk.roa (hash: +p1NTN9tpOnp47raavb228o9/rb5/ylv96jkBXGbTHQ=)
2: AEunzLWh3gsHOrYJNXhTSiOnqEU.roa (hash: a+6FwmOlMr9S4qz3PdaxvAJ+0nFrNrSk/lgCkrtBWLw=)
3: Brh5qAJPA9FMOJZTetxo5g3Xdcg.roa (hash: 0y2jpGlKXD4RZy+O7hfV7TOL/ignRhvtpZ28boX0Mgc=)
4: H1emVUICE2XmoUB3lCjzmQnd6Ak.roa (hash: OQbtHQhbOceKidpOYtukQNjTxgTngWpdYul9lp5ld+E=)
5: HoTv0sdQLHBWRiUvVVDaAHr5gZE.roa (hash: DIU7NFLXWQYLWOK2aoJC+a/KoOz45jlF8l8WQecGPFM=)
6: IADu_a3hKXhr1Hf3Wxg7vE9pXSw.roa (hash: y5tfLHXKWazA7AwML4TwjE9ej8TsMaQiHDfSzy/WlnI=)
7: MSktJCjRKQDGOhyyr4mKUY-X9I0.roa (hash: YB2yhni5jmhv5LOS3OBNxLtMUZLfwVnpogHoPFW8JJc=)
8: OJCWpsxNbupszt0IJQ7GmjOPuU4.roa (hash: emoVCpaFA4Kcns27J7+DwGk3hNm6T2TOcgu0xzbdja8=)
9: Ofgeobg55e8lqnNuTZu03yb12Ag.roa (hash: FN7C8Po9NJD9RTZuVfv4iTIQrGdvz+gzOEAhvCfOHtg=)
10: Q7sGk7ECwFV3meUPYImkro5mZn8.roa (hash: yPT2eaBvSLQfJfLB4jWSat0V9vFdL71JwO3EoW7qPCQ=)
11: QkokzrYDGI69z71ocapb49HcmMw.roa (hash: BPEQLv+L5DDtagemk+MXVy03tCKM+xoA01OlIV162OU=)
12: Qpqd5hHnjqSsp3sn5RVpGOfpq2g.roa (hash: usudWUM+M6fpK5Kxq+vyQ1DEZbBsRF3RxCtpG9oZ+NM=)
13: T5CDK_oQYjtuRm85HhxdOK6D6ro.roa (hash: AghyqtWN0W0iUPw+NKSWTH4tyE+1j2q7hdV6WZEDDus=)
14: TBbYZVnRjlYXHQAtPcfmE7zFNhc.roa (hash: gwN06t/I7Jawt3LQMpSh1ruXZaJYB/QUXUCidscAwp0=)
15: ThdY1NGqdEAlbacIpCzIWWjl8-M.roa (hash: VhQ5Tvljs/taZI++HCXLozJ3N8a0YMuM7YHVXeQMk0Y=)
16: YrfvxNJdeHYuSdfjBibJ7k6pvEE.roa (hash: oBcJN0/vUgerckttMrITgGrAWVOsR/md3WZHA4+tgo0=)
17: ZDSoVMaxuelayYkHDT1Cece0cLM.roa (hash: YJ9/iqfEmNXXNYGq5w6yN8VfwFD7csp8PUDUTe1uRmA=)
18: _w6riE4OlRprr7MI-yGnTko28Sg.roa (hash: Gwzb8KH6//hbsd3+z42M1mtGTl+aF6C5ToJY0z33ZFs=)
19: jlOSteO5B4HlUDCHpcrOn1tZyw8.roa (hash: PNBhGbv1owj//wNV6ueV101gABFDOCaZFzVqrXAhf8s=)
20: oBNWk0ANrXJFnqpqi8qJWun9bTg.roa (hash: ersLK1F7q7UrsdCXpRyyrcybt+NPvXoXFfuofv9kyjc=)
21: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: pb1CZK7nm47OAJzLHcFsOprbpxQ6bV7WghfJgzrI5fk=)
22: w3qodbcoa2ZvgoDJeO5ygCI2aAk.roa (hash: LAkyIylHnXBQNUrOi88pTzQDfdyi1/aUJB7HDCmUEbo=)
23: wfh-UOAZf8zXcfnGgtljGrgtW4Y.roa (hash: v/XrCw+3zSPx3FlcLzuKPWemLUh1+me4/h0qQHJfqdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:1d:09:2a:cf:4b:c3:77:51:95:3b:3a:8d:09:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Sep 22 23:00:09 2026 GMT
Not After : Sep 23 23:00:09 2026 GMT
Subject: CN=11e7dc4905a9c0fb910155a21f7854304e323add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a3:32:09:4b:7f:c9:73:98:e0:47:a2:70:b9:
a2:fe:84:ee:55:e4:31:8c:77:ab:0a:8a:d0:d1:8d:
bd:1f:74:1f:50:b6:48:f9:d7:c7:33:52:ab:d9:d8:
c2:1b:99:9a:a7:bb:db:94:1b:e4:aa:eb:90:ec:94:
01:8c:55:de:41:e5:fa:8c:87:f6:89:ef:9f:ba:03:
66:68:e0:da:42:8a:4f:ae:84:12:d6:42:85:be:d0:
e2:c2:7a:d4:27:8e:84:9a:9d:d5:8d:f9:31:a8:16:
96:a3:f0:bf:b9:e7:3f:1b:95:c8:d3:65:9c:65:c1:
ab:6a:c0:c0:52:8b:e7:f0:de:3a:4c:94:6c:44:50:
f4:f6:2d:03:f1:02:2d:1c:9f:b6:2b:86:67:53:ec:
b4:fe:d7:4c:38:ba:74:73:ae:a6:b9:06:6d:02:2b:
53:31:aa:90:54:23:04:7b:1a:8c:3a:cc:14:35:75:
7c:c9:f4:41:6e:f9:c4:9f:5c:56:0e:bc:8e:18:db:
3f:86:a4:c4:ac:24:e8:d6:78:a9:0b:1c:f1:f7:86:
ec:98:fc:f5:83:d9:40:9e:fb:d2:c6:de:2c:67:75:
24:ec:44:07:47:ed:00:84:8d:0a:f3:c9:ed:db:47:
d3:27:92:ec:4a:5a:85:e6:e0:25:90:ba:76:46:bf:
17:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E7:DC:49:05:A9:C0:FB:91:01:55:A2:1F:78:54:30:4E:32:3A:DD
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:90:02:ec:9f:4d:14:ca:30:b1:64:e5:13:d1:46:be:9c:6d:
57:cc:40:3c:f2:1b:d9:b6:36:d7:52:ad:01:60:df:80:a4:8e:
9c:b4:dc:69:42:9f:37:38:d7:46:75:6c:87:fc:0f:83:4d:af:
34:f7:96:63:d5:31:af:a6:91:d6:29:c4:3f:47:c0:cf:25:fc:
f7:bb:96:7e:48:ab:75:ac:e5:48:99:d0:fa:26:0b:15:26:20:
09:a4:a1:37:ad:43:02:0e:81:5c:72:ba:d2:71:de:ac:b0:8e:
78:d2:84:a6:a9:14:74:fe:21:87:a1:a2:28:7c:ca:e0:09:8b:
d6:56:91:8b:19:ff:a3:4e:03:9d:e2:5e:49:3a:e2:a2:f8:7f:
9a:62:df:0f:5e:a2:0f:53:96:1e:ac:14:7b:6a:49:f4:51:7c:
e8:e8:7a:4f:a2:7e:97:52:4b:61:7d:8e:25:c6:72:65:a6:6f:
e2:df:79:ff:62:fa:08:32:ca:e6:15:97:9a:43:eb:4a:d5:65:
5d:db:f9:54:d7:19:dc:69:09:df:a8:76:8e:11:1b:8c:72:a7:
13:16:23:21:db:83:4c:93:39:ab:f4:a2:ad:b0:00:e9:d3:85:
3b:2b:2c:9f:48:7f:df:be:fb:75:f5:12:e9:71:ff:bd:0f:f9:
1f:d9:cb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:24:49 2026 by rpki-client